FireEye describes: > "Multiple trojanzied updates were digitally signed from March - May 2020 and posted to the SolarWinds updates website, including hxxps://

FireEye describes: > "Multiple trojanzied updates were digitally signed from March - May 2020 and posted to the SolarWinds updates website, including hxxps://downloads.solarwinds[.]com/... So does this mean that the attacker masqueraded as SolarWinds and somehow (brute force?) forged the signature? Or that the attacker had agents working at SolarWinds?